Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3708f241-4511-34dd-beaa-4b5842719d2b.roa
File: 3708f241-4511-34dd-beaa-4b5842719d2b.roa (raw, json)
Hash identifier: wUfYWig6gE5cEH+hCZ6UMRWK+/gvrMa6DN7Z5bv19ek=
Subject key identifier: BD:CD:1A:75:5C:10:4C:2F:E0:F5:6A:09:00:7D:D6:51:D2:88:1D:82
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285848BD20DDB310014087EBE53A00
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3708f241-4511-34dd-beaa-4b5842719d2b.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 28753
IP address blocks: 45.117.55.0/24 maxlen: 24
45.123.146.0/24 maxlen: 24
45.123.147.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:dd:b3:10:01:40:87:eb:e5:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=b5aa982c-f1b2-405c-9225-7d49602d8c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:24:01:54:44:5b:81:d1:a2:ee:86:ea:e1:
55:60:02:39:88:9d:dd:63:90:b5:aa:f1:4a:bb:1d:
d3:3f:8c:90:45:c3:1e:11:5f:cf:58:d8:d3:95:11:
5a:d7:28:35:cf:bf:cf:6e:5f:a2:46:fc:a9:8c:69:
23:b8:12:27:ea:41:7e:01:b3:c9:b3:31:4c:bb:b3:
25:c8:6e:83:f9:b1:06:8d:b7:d9:cb:51:76:e9:d5:
9f:d2:35:23:88:4a:1e:df:b1:27:15:ae:0f:14:a6:
ef:9d:8d:87:45:96:e6:8c:69:3f:be:59:e6:d1:6c:
da:72:97:ae:7f:55:fb:2a:c4:b7:db:e9:0f:ad:1c:
2a:16:2c:9e:69:53:da:c5:b6:ed:d4:48:ee:20:13:
93:90:64:9a:a7:bd:f4:9b:2e:62:2c:d5:ec:12:ca:
d6:47:b3:cc:92:b6:b0:9b:ee:df:73:09:28:44:f5:
e9:e2:b9:04:cd:f9:3e:17:76:c5:f4:2f:25:b6:64:
0f:a7:30:f3:50:af:88:73:b5:02:75:22:25:1f:81:
81:d0:b8:c5:f4:26:81:54:3a:05:fb:49:0c:58:a2:
0a:d6:c8:fb:be:b9:bc:cc:ce:66:d1:f6:58:60:98:
1c:73:6c:79:78:9e:97:f7:08:89:76:d5:2d:13:14:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:1A:75:5C:10:4C:2F:E0:F5:6A:09:00:7D:D6:51:D2:88:1D:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3708f241-4511-34dd-beaa-4b5842719d2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
45.117.55.0/24
45.123.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:b3:36:29:94:07:82:50:09:94:83:56:1e:4b:41:37:80:3a:
17:ff:ec:76:98:82:a3:f9:31:9a:bf:cc:f5:76:11:0f:94:2f:
24:34:41:dd:31:6b:90:a3:38:81:04:08:8d:e0:f9:bf:b6:44:
7a:9b:f0:1b:d5:a0:13:b0:70:e0:20:51:fd:08:4c:cd:5f:a1:
67:da:81:2e:45:d2:58:c5:29:f8:b2:08:44:db:ba:1a:b3:23:
8f:24:f4:fb:16:55:dd:27:32:f8:79:df:69:70:fc:f7:36:56:
17:2d:ef:3c:8c:8b:5b:6c:b2:a1:5f:5d:6e:2e:03:d0:9f:63:
80:c1:b5:f7:c7:2e:b9:df:61:e5:81:e2:66:79:9f:6d:90:ff:
71:f4:9c:a8:d4:48:63:03:87:f3:b0:a1:02:eb:dc:88:c8:06:
c1:bf:83:fd:bf:29:98:4f:90:2e:1a:ed:1c:b5:7d:b6:e4:5e:
a9:0b:30:29:a7:5a:e9:fe:fb:de:6d:2e:9a:dd:d1:cd:e2:cd:
61:b8:a7:64:46:57:87:e9:ab:35:8b:41:23:59:13:41:45:84:
cf:e1:4b:c1:5a:20:e5:52:75:34:db:f4:6c:47:f0:1a:78:bb:
60:3d:94:7c:a5:6c:83:b5:9e:df:53:43:6c:26:11:14:a6:51:
19:35:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:56:57 2025 by rpki-client